Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 5228 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cleans failing when pushed from the console

Blossom

I've recently had a few instances where we've pushed a clean from the console and it has failed (console shows status as "cleanup failed")  and then when someone tries to clean it locally we see code a0250026 "Virus/spyware XXXX was not removed because of errors".

I think it may possibly be a permissions problem.

Anyone else seen this?

:5637


This thread was automatically locked due to age.
  • 0

    Take a look at the anti-virus and HIPS log (or just open the machine's SAV.txt located in [...All Users\Application Data|ProgramData]\Sophos\Sophos Anti-Virus\logs\), it might contain the specific reason. Don't know if setting the log level to verbose (either from the local GUI or SEC) will give additional information - didn't need it.

    If you still have troubles with cleanup please state the SAV version and the threat (together with a snippet from the log).

    Christian

    :5639
  • 0

    Hi, I too am doing the same, yesterday I noticed some files and send them to me as a virus detected and not cleaned yet and get error a0250026, I see the antivirus console I have no permissions, but if you delete sophos administrator group when I enter my network user before was not so happened?

    Thanks

    :5644
  • 0

    thanks, taking a look and will report back when I have more info

    :5655
  • 0

    seems to fix the problem, apparently is an update failed and that alone is already eliminating the virus and I've noticed that most teams are asking for restart. but I have a problem on my console sophos 4.0 pc random name change is kind of weird recently I noticed it yesterday with this problem by installing a test pc create a folder on the Sophos console where I put that computer and began to change computer name from time to time, every time the console cleaned by another name appeared a little weird?

    as you go with your console ?

    :5665
  • 0

    Hello Tony-MTC,

    any chance that these PCs with "random name change" have been cloned (or imaged) from a machine which had Sophos already installed and running? And - if several machines report with the same identity (and thus their reports accumulate) you'll get all kinds of weird results. For example: computer A reports threat xy which appears as Cleanable in SEC. You request Cleanup but meanwhile computer B has reported to SEC and it is the one which will receive the command. Of course it reports an error as this threat isn't in its quarantine list.

    Christian

    :5666
  • 0

    Thanks, I was inquiring with the helpdesk and had been cloning some computers with Sophos installed.

    Thanks


    :smileywink:

    :5667